<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta http-equiv="content-security-policy" content="connect-src 'self'; form-action 'self';">
    <title>Title</title>
</head>
<body>
<div>This is content</div>
<form action="http://baidu.com">
    <button type="submit">click me</button>
</form>
<script>
    console.log('inline js')
    fetch('http://baidu.com')
</script>
<script src="/test.js"></script>
<script src="http://code.jquery.com/jquery-migrate-1.2.1.min.js"></script>
</body>
</html>